In this episode of Security Headlines, we are joined by  

the Hacker Johnny Xmas. Johnny is a very interesting character   

with a lot of fun projects behind him.   

Join us as we get to hear Johnny's stories as we deep dive 

into this weeks episode of Security Headlines:

## Venmo

After giving a talk about it and releasing software that made everyone  

able to easily abuse this, Luckily venmo took action and limited the 

amount of data avaliable. Johnny found a way to generate api keys with  

just making a simple request to the 

## Bypassing Webb application firewalls   

A lot of firewalls just focus on IP filtering which is a huge problem  

when, in todays world it is really easy and cheap for a consumer   

to aquire a large sets off ip addresses.  

One provider of proxied ip addresses is Hola VPN that lets their free   

users act as exit nodes that they sell using platforms such as luminate.

Other people have adopted this approach but with mobile development toolkits.  

## Grimm    

Johnny is currently working for the security engineering firm Grimm, a company known for its involvement in the ICS(Industrial control system) security work.  

Currently working on developing 

Grimm is currently hiring people, do you want to get paid to develop security training platforms ?

then Grimm is the place for you!

External links:   

https://twitch.tv/j0hnnyxm4s

https://twitter.com/J0hnnyXm4s/

https://www.youtube.com/c/JohnnyXmas/

https://github.com/johnnyxmas/Talk_Decks/tree/master/2019/Sorry%20about%20your%20WAF

https://ghost.express/   

https://www.cnbc.com/2020/05/07/zoom-buys-keybase-in-first-deal-as-part-of-plan-to-fix-security.html  

https://www.twitch.tv/mr_horologist   

https://twitter.com/cigarsec   

https://www.icsvillage.com/   

https://www.grimm-co.com/careers   

https://en.wikipedia.org/wiki/Venmo   

https://www.technowize.com/grindr-security-flaw-lets-anyone-hijack-user-accounts/

https://en.wikipedia.org/wiki/Principle_of_least_privilege  

https://en.wikipedia.org/wiki/Branched-chain_amino_acid  

https://opihr.com/   

https://en.wikipedia.org/wiki/Sub7

https://nmap.org/book/man-nse.html  

https://en.wikipedia.org/wiki/Less_Than_Jake   

https://en.wikipedia.org/wiki/Oh,_Sleeper

https://luminati.io/  

https://selenium.dev/  

https://blog.firosolutions.com